Ukukhululwa kwe-Knot DNS 3.0.0 kukhutshiwe, iseva enegunya le-DNS ukusebenza okuphezulu (ukuphindaphinda kuyenziwa njengesicelo esahlukileyo) exhasa zonke izinto zangoku ze-DNS.
I-Knot DNS ngumncedisi onegunya inkqubo yegama lomthombo ovulekileyo. Yenziwe kwasekuqaleni kwaye yaphuhliswa ngokubonakalayo yiCZ.NIC. Injongo yale projekthi kukubonelela ngolunye uluvo olusebenzayo lokumiliselwa kweseva efanelekileyo ye-DNS kubaqhubi be-TLD ukwandisa ukhuseleko, uzinzo, kunye nokomelela kweNkqubo yamagama eDomain.
Iyaphunyezwa njenge-daemon enemisonto emininzi, kusetyenziswa ubuchule beenkqubo kunye nolwakhiwo lweedatha ukwenza iserver ikhawuleze kakhulu.
Malunga ne-Knot DNS
Ulwazi lwe-DNS isebenzisa i-zone analyzer ebhalwe kwiRagel ukufezekisa umthwalo ngokukhawuleza okukhulu yemimandla ekuqaleni. Iyakwazi ukongeza nokususa imimandla kubhabho ngokutshintsha ifayile yoqwalaselo kunye nokulayisha kwakhona iserver usebenzisa i 'knotc' eluncedo.
Ulwazi lwe-DNS ijolise ekusetyenzisweni kombuzo ophakamileyo, apho isebenzisa ukumiliselwa kokufundwa okuninzi kwaye ubukhulu becala kungathinteli okufanelekileyo kwiinkqubo ze-SMP.
Iimpawu ezinje ngokudibanisa nokususa imimandla kubhabho zinikiwe, Ukuhanjiswa kwendawo phakathi kweeseva, i-DDNS (uhlaziyo olunamandla), izandiso ze-NSID (RFC 5001), i-EDNS0 kunye ne-DNSSEC (kubandakanya iNSEC3), umda wokuphendula (RRL).
Iindaba eziphambili zeKnotDNS
Kule nguqulo intsha yongeza imo yokusebenza yenethiwekhi ephezulu, iphunyezwe kusetyenziswa inkqubo esezantsi yeXDP (eXpress Data Path), ebonelela ngeendlela zokwenza iipakethi kwinqanaba lomqhubi wenethiwekhi ngaphambi kokuba zilungiswe yistack yenethiwekhi yeLinux. Le ndlela ifuna i-Linux kernel 4.18 okanye kamva.
Yongezwe Inkxaso "yeMimandla yeKhathalogu" ukwenza lula ukugcinwa kweeseva zesekondari ze-DNS. Xa eli nqaku linikwe amandla, endaweni yokuchaza iirekhodi ezahlukileyo zommandla ngamnye wesekondari kwiseva yesibini, ikhathalogu yendawo idluliswa phakathi kweeseva eziziiprayimari neziziisekondari, emva koko imimandla eyenziwe kwiseva ephambili iphawulwe njengabandakanyiwe kwikhathalogu yenziwe ngokuzenzekelayo kwiserver yesibini ngaphandle kwesidingo sokuhlela iifayile. Ukuseta. Isixhobo se kcatalogprint sinikezelwe ukulawula ikhathalogu.
Yongezwe Inkxaso yemeko yokurhoxiswa kwe-KSK (Isitshixo sokutyikitya) (RFC 5011) kwimowudi yolawulo lweqhosha le-DNSSEC.
Yongezwe Inkxaso yesigqibo sokumiselwa kwesiginitsha yedijithali kusetyenziswa ii-algorithms ze-ECDSA (ifuna i-GnuTLS 3.6.10 kunye nokusebenza okutsha).
Olunye utshintsho olwahlukileyo yale nguqulo intsha:
- Yongeze indlela entsha yokuqinisekisa ye-DNSSEC.
- Yongeze i-kzonesign eluncedo kulwakhiwo olusebenzayo lwesiginitsha yedijithali ye-DNSSEC.
- Yongeze i-kxdpgun eluncedo ngokuphunyezwa kokusebenza okuphezulu kwe-DNS ngaphezulu kwe-UDP yomvelisi wendlela weLinux.
- I-Kdig yongeza i-DNS ngaphezulu kwe-HTTPS (DoH) ngenkxaso nge-GnuTLS kunye ne-libnghttp2.
- Kucetyiswa indlela ekhuselekileyo yokuxhasa kunye nokubuyisela idatha yendawo ye-DNS.
- Ukusebenza kwemodyuli yamanani kuphuculwe kakhulu.
- Xa uvumela imowudi efundwe ngokulula ukuba ivelise imisayino yedijithali yemimandla ye-DNS, eminye imisebenzi eyongezelelweyo enemimandla iyafana.
- Ukuphuculwa kokugcinwa kwe-caching kunye nokusebenza kombuzo okuphuculweyo.
Khuphela kwaye ufake
Ukuze ufake le seva ye-DNS kwindlela yakho Kuya kufuneka uqokelele ikhowudi yakho kwaye oku kufuneka ube nokuxhomekeka oku kulandelayo:
- enza
- libtool
- pkg-cwangcisa
- Ukuzenzekelayo> = 2.65
- i-python-sphinx
Ngoku Kuya kufuneka ufumane ikhowudi yenguqulo yamva nje. Unokwenza oku ngokuya kwiwebhusayithi esemthethweni kwaye kwicandelo lokukhuphela unokufumana iphakheji.
Ngokumalunga namanyathelo oza kuwenzela ukudityaniswa, ayisiyinzululwazi enkulu, kuya kufuneka wenze:
autoreconf -i -f ./configure make
Kwaye ukuba ufuna ufakelo olwenzelwe wena ngakumbi, ungajonga iinkcukacha kule khonkco ilandelayo.